Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          l5PreyS0mrkFVmGnynPurrir4nYoAdpq7o/rQlCxaHc=
Subject key identifier:   CA:9D:C6:AC:F7:6E:F7:F4:9D:8C:19:06:8C:21:37:08:8E:6D:A8:E9
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       7423BCA5B70CC3D918DC281DE592BCF92B3B9B11
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:19 +0000
ROA not before:           Tue 04 Feb 2025 18:51:19 +0000
ROA not after:            Tue 03 Feb 2026 18:56:19 +0000
asID:                     264780
IP address blocks:        179.61.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:23:bc:a5:b7:0c:c3:d9:18:dc:28:1d:e5:92:bc:f9:2b:3b:9b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:19 2025 GMT
            Not After : Feb  3 18:56:19 2026 GMT
        Subject: CN=CA9DC6ACF76EF7F49D8C19068C2137088E6DA8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:24:61:66:38:7b:19:af:0a:7a:a9:a9:25:
                    bb:c6:c5:6b:99:2a:93:1e:22:c7:07:2d:e9:c3:6d:
                    90:25:14:bb:df:9e:90:39:5f:cf:1d:40:f4:a8:07:
                    75:3f:4e:e0:3f:c8:74:37:b7:d7:c3:f9:cb:f1:1e:
                    23:de:a5:40:80:26:88:6a:00:57:ba:ac:74:0e:45:
                    a2:49:5a:d6:81:f7:45:47:03:82:05:c5:29:6c:81:
                    58:49:50:d1:46:13:9f:c3:fd:24:24:00:91:44:e0:
                    80:7f:36:b0:3e:ca:62:e7:bb:55:9f:4f:af:bd:ff:
                    6f:bf:1f:79:21:a9:86:98:82:ea:f5:69:c9:b3:b9:
                    2c:b3:c0:62:14:24:07:e9:a5:db:5c:aa:b2:9e:96:
                    25:90:41:e1:8e:19:50:85:61:4c:a7:e9:4e:63:2e:
                    2b:4d:ed:66:28:26:a9:0a:02:27:c0:35:21:3e:4c:
                    08:4d:dd:3d:19:39:ae:dc:c1:8d:60:01:11:dd:92:
                    09:ab:40:22:55:87:be:4c:eb:9e:ab:0b:b4:01:40:
                    bf:8b:2f:63:0e:85:39:85:b1:d0:4a:4b:02:66:51:
                    01:f3:b5:b2:69:0d:77:9d:be:75:44:36:79:ed:81:
                    de:f1:63:bf:b0:af:18:62:77:c1:a6:08:1f:55:1b:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:C6:AC:F7:6E:F7:F4:9D:8C:19:06:8C:21:37:08:8E:6D:A8:E9
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:a1:dd:a6:0d:6d:e8:de:f9:80:8b:aa:52:a1:09:96:95:
         6f:aa:9e:ef:71:6b:be:f7:e3:99:d6:d6:db:09:c5:43:55:71:
         51:25:8a:fe:4b:d3:66:e6:3b:2c:38:5f:59:16:d8:96:ba:fd:
         17:2e:85:7a:21:6a:7a:ed:7b:66:64:4a:28:50:86:39:1d:71:
         ad:4a:cc:88:72:3a:a2:48:00:f3:1a:fc:3a:ce:40:76:ed:c2:
         1d:77:44:18:0f:50:6f:a1:cc:5f:ba:56:c2:50:35:66:75:3c:
         80:b0:aa:6d:a3:52:83:25:96:08:d0:02:12:28:74:95:4b:2e:
         38:4e:dc:11:45:72:3b:39:33:6d:1f:ee:13:91:c3:f0:44:e3:
         4f:fe:f0:f7:f6:50:d6:a4:13:be:24:29:64:23:7d:e6:c1:3a:
         6c:d1:20:15:62:50:f5:2a:f0:9a:1c:0f:d9:93:93:76:90:1b:
         a4:e5:91:88:48:6b:a6:13:bb:d6:d7:7f:22:79:6a:65:34:39:
         77:ea:6e:e4:9d:32:c8:a4:a5:28:bd:81:6a:1d:12:85:d5:b2:
         ef:57:76:4d:b9:ef:3d:12:98:9e:82:cc:aa:ee:1b:c5:85:e7:
         0a:e6:1a:78:2a:59:d6:6c:76:1e:7f:88:dd:d5:83:36:1c:9d:
         a6:8e:49:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdCO8pbcMw9kY3Cgd5ZK8+Ss7mxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNThBQzgzMENDQzQzNkIwMTYxMkM5NkI5RDY1RjZB
REEzOEYxODAeFw0yNTAyMDQxODUxMTlaFw0yNjAyMDMxODU2MTlaMDMxMTAvBgNV
BAMTKENBOURDNkFDRjc2RUY3RjQ5RDhDMTkwNjhDMjEzNzA4OEU2REE4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNCCRhZjh7Ga8KeqmpJbvGxWuZ
KpMeIscHLenDbZAlFLvfnpA5X88dQPSoB3U/TuA/yHQ3t9fD+cvxHiPepUCAJohq
AFe6rHQORaJJWtaB90VHA4IFxSlsgVhJUNFGE5/D/SQkAJFE4IB/NrA+ymLnu1Wf
T6+9/2+/H3khqYaYgur1acmzuSyzwGIUJAfppdtcqrKeliWQQeGOGVCFYUyn6U5j
LitN7WYoJqkKAifANSE+TAhN3T0ZOa7cwY1gARHdkgmrQCJVh75M656rC7QBQL+L
L2MOhTmFsdBKSwJmUQHztbJpDXedvnVENnntgd7xY7+wrxhid8GmCB9VGy3VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyp3GrPdu9/SdjBkGjCE3CI5tqOkwHwYDVR0j
BBgwFoAUxRWKyDDMxDawFhLJa51l9q2jjxgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0I2ODg0NTI1MjRGMjk3OUFBRTU3RTBFQjVBQkY5NjQ3
MDRCMDgwMEIwM0JDNkFCODc1ODJCQjNCQTFCMUEyLzAvQzUxNThBQzgzMENDQzQz
NkIwMTYxMkM5NkI5RDY1RjZBREEzOEYxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTE1OEFDODMwQ0NDNDM2QjAx
NjEyQzk2QjlENjVGNkFEQTM4RjE4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCNjg4NDUyNTI0RjI5NzlBQUU1N0UwRUI1QUJGOTY0NzA0QjA4MDBC
MDNCQzZBQjg3NTgyQkIzQkExQjFBMi8wLzMxMzczOTJlMzYzMTJlMzEzMTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz1v
MA0GCSqGSIb3DQEBCwUAA4IBAQBly6Hdpg1t6N75gIuqUqEJlpVvqp7vcWu+9+OZ
1tbbCcVDVXFRJYr+S9Nm5jssOF9ZFtiWuv0XLoV6IWp67XtmZEooUIY5HXGtSsyI
cjqiSADzGvw6zkB27cIdd0QYD1BvocxfulbCUDVmdTyAsKpto1KDJZYI0AISKHSV
Sy44TtwRRXI7OTNtH+4TkcPwRONP/vD39lDWpBO+JClkI33mwTps0SAVYlD1KvCa
HA/Zk5N2kBuk5ZGISGumE7vW138ieWplNDl36m7knTLIpKUovYFqHRKF1bLvV3ZN
ue89Epiegsyq7hvFhecK5hp4KlnWbHYef4jd1YM2HJ2mjknO
-----END CERTIFICATE-----
Generated at Thu Feb 13 18:40:57 2025 by rpki-client